/etc/httpd/conf.d/10-keystone_wsgi.conf, wrong value of OIDCCacheShmMax

[Francesco Di Nucci]

Maybe related to #2054306
Switched from 2023.1 to 2023.2, keystone setup fails with the error:

OIDCCacheShmMax takes one argument, Maximum number of cache entries to use for "shm" caching

Because even if in the EYAML there is declared

keystone::federation::openidc::openidc_cache_shm_max: '33297'

the variable is not evaluated correctly, and the resulting /etc/httpd/conf.d/10-keystone_wsgi.conf contains:

OIDCCacheType memcache
OIDCCacheShmMax scope['::keystone::federation::openidc::openidc_cache_shm_max'] %>
OIDCMemCacheServers "127.0.0.1:11211"

And obviously it's not a valid value

[Takashi Kajinami (kajinamit)]

It seems the problem was added 6 years back when these parameters were initially added...
 https://review.opendev.org/c/openstack/puppet-keystone/+/577420

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/909449

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/909449
Committed: https://opendev.org/openstack/puppet-keystone/commit/30f50ce8fdf56b2332ec8ea8bb6a48f7fa73b916
Submitter: "Zuul (22348)"
Branch: master

commit 30f50ce8fdf56b2332ec8ea8bb6a48f7fa73b916
Author: Takashi Kajinami <email address hidden>
Date: Mon Feb 19 22:29:26 2024 +0900

    Fix broken rendering of OIDC Options

    ... and also fix a typo in redis password option.

    Closes-Bug: #2054308
    Change-Id: I41d3efd265305e80c453e7f042797881319c5047

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/puppet-keystone 24.0.0 release.